security scheme

[jeroen_wilmes]

I have set a security scheme to allow third party developers to see only a sub-set of issues in the project. (by purpose they are in one project)

By having 2 security levels; one for all users (including the role "third party) and one for internal users only. 

The security level is set by a custom field "classification" with 2 values (radio button) "internal only" and "internal and external".

I grant only the role "product manager" the permission to change security settings

Third parties do need Edit permissions to report progress and link issues.

With all these settings "third parties" still can change the security setting of the issue.

My question:  How can I prevent the role "third party" to change the custom field that sets the security level and at the same time gives the role "third party" the permission to edit fields on the issues that are visible to them?

[jeroen_wilmes · Accepted solution]

All my settings were correct and worked.

I had problems with changing the security level.

For that there is a different appraoch than changing a "normal" field.

To change the Security level setting you have to hoover over the little red "lock" icon. If you have permissions to change, you will see the change options and can make the change.

I found the information, thanks to helpdesk on:

https://support.atlassian.com/jira-cloud-administration/docs/configure-issue-security-schemes/

[YY Brother · Accepted solution]

Hi @jeroen_wilmes 

1.Please use the existing field Security Level to configure Issue Level Security instead of that customized field. Use the default security level to be visible internally.

2.How can I prevent the role "third party" to change the custom field that sets the security level

and at the same time gives the role "third party" the permission to edit fields on the issues that are visible to them?

==> feasible. in the permission scheme:

Set Issue Security granted to "product manager", not to "third party" users.

Thanks,

YY哥

[jeroen_wilmes]

Thanks for helping me, but not sure if I understand correctly.
How can I use the field "security level"? Although it has been added to the configuration scheme's and the screens it never shows up as a field that I can change.

Although I can set security level default to internal, I should be possible to change it. I have no idea how I can do that without having that field accesible?  Can you help me further on that?

granting Productmanager and not third party roles the permission the set issue security is clear, and that I have already configured that way.

[YY Brother]

How can I use the field "security level"? Although it has been added to the configuration scheme's and the screens it never shows up as a field that I can change.

==> Please go to one of the issues and at the top right ..., select Find field to triage the reason why that field isn't showing to you:

Just have a try.

[jeroen_wilmes]

But for one or the other reason I don't have a section "Hidden fields" if I'm on the "issue layout" page nor does the field shows up if I try to search for it.
I am project lead for this project and have admin rights.